Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/74009bb0-aad4-398c-bdc3-a17edf98c150.roa
File:                     74009bb0-aad4-398c-bdc3-a17edf98c150.roa (raw, json)
Hash identifier:          54ts9cFzGm/xD90711Heu+usrFJo4Z9eEAlVm9lkrSA=
Subject key identifier:   62:9C:55:F9:92:C4:FF:6B:78:82:3C:07:80:6C:38:ED:C7:C0:A3:66
Certificate issuer:       /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial:       010D0C9F4328584734C885F1641C36840F094D80
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/74009bb0-aad4-398c-bdc3-a17edf98c150.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     25649
IP address blocks:        192.34.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:85:f1:64:1c:36:84:0f:09:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=7eb09fe5-1960-4dc2-bbe4-67920bec24fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:50:cd:8f:88:bc:c7:49:90:b6:f7:d2:0e:ac:
                    a4:2e:30:47:82:47:3b:2d:ed:5d:39:71:e6:64:03:
                    e1:99:1c:34:10:34:f5:e6:20:b5:fc:74:62:19:aa:
                    be:af:83:a3:ac:ef:10:af:4f:85:37:51:0b:e0:d7:
                    1a:bc:aa:8c:02:1c:9c:cd:6c:b3:cc:a2:a6:d3:d9:
                    83:b6:ad:b4:62:5e:63:a2:f6:3d:52:19:a6:b8:c1:
                    d8:12:5c:b6:c0:d2:57:6d:13:f6:b8:1a:b3:ad:e0:
                    81:b9:45:4e:18:62:68:07:c5:fc:ec:c5:6c:3b:e7:
                    c9:67:67:29:9d:ae:29:47:56:60:9f:5b:9a:51:fd:
                    a5:bf:fd:eb:7a:b2:a8:d0:84:16:03:b7:20:a2:c2:
                    2a:3d:37:ab:30:30:70:53:b3:be:70:2f:23:86:9f:
                    43:65:98:18:fd:b1:50:0e:7a:db:5a:c0:f2:5e:18:
                    6e:17:c0:0c:0d:90:b0:79:43:ee:70:c8:2d:16:50:
                    34:51:a0:74:d7:42:37:68:fd:70:b8:6c:2c:0c:f7:
                    cb:5a:af:63:07:dc:39:c7:f1:5e:a7:58:1b:22:1b:
                    dd:56:a3:d0:dc:ec:f3:89:c0:f4:93:b3:b5:e5:14:
                    19:70:5e:f0:1e:aa:4a:bb:3c:f8:f0:55:ab:e7:c6:
                    27:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9C:55:F9:92:C4:FF:6B:78:82:3C:07:80:6C:38:ED:C7:C0:A3:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/74009bb0-aad4-398c-bdc3-a17edf98c150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl

            X509v3 Authority Key Identifier:
                keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:8e:a2:b6:cd:49:dd:68:20:e7:ab:d8:92:3f:df:fc:61:81:
         cc:d6:6a:a1:cc:38:cb:97:ac:39:b7:02:67:36:b9:a7:63:05:
         f5:7f:91:46:da:3e:82:fd:9b:73:63:fa:8c:49:5b:70:22:4a:
         46:b5:7b:ac:4c:89:d0:48:73:d6:9d:84:b4:6e:f7:15:46:f4:
         60:2b:6a:20:dc:7b:e4:33:fd:64:4e:f6:15:0b:f7:78:cf:50:
         55:75:a9:93:20:f8:f4:e0:71:97:37:a7:54:72:a3:11:c7:4c:
         14:ef:b4:3d:a0:ff:64:d4:b9:63:89:2c:5a:46:95:91:6f:ae:
         f3:14:f8:ff:0b:72:09:43:67:d0:2c:b5:5e:9f:00:b9:cd:4c:
         98:d4:79:93:e4:fc:c4:6f:3f:3c:81:5a:b7:76:9a:61:ea:79:
         e3:c1:40:66:f6:0f:41:bf:a2:91:13:ae:28:3c:84:12:f1:d2:
         12:8f:7e:4e:4d:69:a8:1c:1f:22:a5:db:1f:34:74:5f:3a:20:
         af:87:96:33:1f:d9:23:d1:47:54:47:d2:a7:86:46:e3:17:00:
         07:f3:e9:d6:ea:72:83:05:d4:a7:07:5f:9a:6e:f8:7c:d2:eb:
         e5:bf:73:19:7e:4f:2c:80:46:c9:f8:81:6b:ee:2e:ca:c9:3c:
         0d:83:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:54 2024 by rpki-client on console-fra.rpki-client.org